  
<!DOCTYPE html>
<html lang="en">
<head>
  <meta charset="utf-8">
  <meta name="viewport" content="width=device-width,initial-scale=1">
  <title>反射型 XSS</title>
</head>
<body>
你搜索了：<%-search%> 

</body>
</html>